Oracle Fusion Cloud ERP and PayPal integration

What moves between them

Invoices created in Oracle Fusion Cloud ERP are pulled by ml-connector on a schedule and submitted to PayPal as payment requests. After PayPal processes a payment and a capture is completed, ml-connector receives the confirmation via webhook and posts the payment settlement into Oracle Fusion Cloud ERP's general ledger, mapped to the supplier and GL account from the original invoice. Transaction details are aligned in both directions so payment reconciliation matches invoice detail.

How ml-connector handles it

ml-connector stores both Oracle Fusion Cloud ERP and PayPal credentials encrypted and refreshes the OAuth 2.0 bearer tokens before they expire (Oracle tokens at 50 minutes, PayPal tokens at 7 hours and 50 minutes). On the Oracle side it accepts the full customer pod URL per tenant, since Oracle publishes no shared base address, and filters invoice queries by last update date to pull only changed records since the prior poll. When PayPal webhooks arrive, ml-connector verifies the RSA-SHA256 signature using PayPal's published certificate to ensure authenticity, then posts the payment confirmation and capture details into Oracle's journal batch API for immediate GL posting. Supplier validation occurs before a payment is submitted to ensure the supplier is registered in both systems, and failed payments are tracked with full audit detail so they can be replayed when the issue is resolved. Rate limits are handled with exponential backoff, and every record carries a full transaction trail.

A real-world example

A mid-sized software services company uses Oracle Fusion Cloud ERP for accounts payable and vendor management, and processes client payments and refunds through PayPal. Before the integration, the finance team exported invoices from Oracle, manually matched them to customers and projects in PayPal, and tracked payment confirmations in a spreadsheet, then re-entered settlement details into Oracle's general ledger daily. Month-end reconciliation required cross-referencing PayPal's transaction list against Oracle's unmatched invoices and chasing differences. With Oracle Fusion Cloud ERP and PayPal connected, each invoice generated in Oracle flows to PayPal automatically, payments are captured and confirmed, and settlement posts back into Oracle's ledger in real time. Reconciliation is now a verification step rather than a detective hunt.

What you can do

• •Pull invoices from Oracle Fusion Cloud ERP and submit them to PayPal as payment requests on a schedule tied to your billing cycle.
• •Post PayPal payment confirmations and captures back into Oracle Fusion Cloud ERP's general ledger with automatic GL account and supplier mapping.
• •Verify PayPal webhook signatures with RSA-SHA256 and handle payment events securely at scale.
• •Store OAuth 2.0 credentials encrypted for both Oracle Fusion Cloud ERP and PayPal, with automatic token refresh before expiry.
• •Poll Oracle Fusion Cloud ERP on a schedule with timestamp filtering, and receive PayPal confirmations via webhook with full audit trail and error replay.

Questions

Which direction does data move between Oracle Fusion Cloud ERP and PayPal?

The main flow is Oracle Fusion Cloud ERP into PayPal. Invoices and payment requests move from Oracle into PayPal, while payment confirmations and capture details flow back into Oracle for GL posting and reconciliation. PayPal transaction history can also be read on demand for reconciliation verification.

How does the integration handle OAuth 2.0 token expiry and refresh?

ml-connector caches OAuth 2.0 bearer tokens and refreshes them before expiry to prevent failed API calls. Oracle Fusion Cloud ERP tokens are refreshed at 50 minutes (before the 60-minute expiry), and PayPal tokens are refreshed at 7 hours and 50 minutes (before the 8-hour expiry). Token refresh happens automatically in the background.

How are PayPal webhooks verified for authenticity and fraud?

PayPal signs every webhook with an RSA-SHA256 signature in the paypal-transmission-sig header. ml-connector validates the signature against PayPal's published certificate before processing any webhook event. This prevents forged payment confirmations or unauthorized settlement postings into your Oracle Fusion Cloud ERP general ledger.